Microsoft AB-900 Online Practice Questions and Exam Preparation

Microsoft AB-900 Online Questions & Answers

• Question 81:

  Your organization has a Microsoft 365 subscription. Your company recently purchased Microsoft 365 Copilot licenses for some users.

  You need to identify how many unlicensed users have used Copilot in Microsoft Teams.

  Which usage report should you use in the Microsoft 365 admin center?

  A. Microsoft 365 Copilot Chat
  B. Microsoft 365 Copilot Search
  C. Microsoft 365 Apps
  D. Microsoft 365 Copilot
  A. Microsoft 365 Copilot Chat

  ---

  Explanation

  The Microsoft 365 admin center provides Copilot-related usage and billing information, including identifying pay-as-you-go or unlicensed usage scenarios where applicable. Other admin experiences do not provide the same Copilot usage visibility. The requirement is to see unlicensed Copilot usage in Teams.

• Question 82:

  HOTSPOT

  Your organization uses Microsoft Purview sensitivity labels to protect content and containers across Microsoft 365. The compliance team is reviewing where sensitivity labels can be applied, including SharePoint sites, Exchange email messages, and Windows devices.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Yes; Yes; No

  Sensitivity labels can be applied to SharePoint sites as containers and to email messages in Exchange. They are not applied to Windows 11 devices as device management objects. Device compliance and configuration are handled through endpoint management rather than Purview sensitivity labeling.

• Question 83:

  Your organization has a Microsoft 365 E5 subscription.

  You need to ensure that a third-party cloud service can authenticate to Microsoft Entra.

  What should you configure?

  A. a Microsoft 365 Copilot connector
  B. multifactor authentication (MFA)
  C. a Conditional Access policy
  D. an app registration
  D. an app registration

  ---

  Explanation

  An app registration creates the Microsoft Entra application object that a third-party cloud service uses for authentication and permissions. MFA and Conditional Access protect user access, and a Copilot connector is not the identity object. The requirement is external application authentication, so the Entra app registration fits.

• Question 84:

  HOTSPOT

  Your organization uses Microsoft SharePoint Online to host team sites and collaboration content. An administrator needs to configure SharePoint access and permissions from the SharePoint admin center. You need to identify which type of object can be created from the SharePoint admin center to support permission management.

  Select the answer that correctly completes the sentence.

  

  

  ---

  The SharePoint admin center is used to create and manage SharePoint sites. It does not create servers or users, and roles are normally managed through permissions and role assignments rather than as newly created SharePoint admin center objects. The requirement is SharePoint object creation.

• Question 85:

  Your company requires that all Microsoft SharePoint sites have a minimum of two owners.

  You need to ensure that sites that have less than two owners are marked as read-only if the sites are NOT remediated.

  What should you configure in the SharePoint admin center?

  A. Site-level access restriction
  B. Data access governance reports
  C. Site lifecycle management
  D. Block download policy for SharePoint and OneDrive
  A. Site-level access restriction

  ---

  Explanation

  SharePoint site lifecycle management and governance policies can enforce requirements such as minimum owner count and apply remediation behavior when sites are out of compliance. Other choices such as DLP or sensitivity labels protect content but do not enforce owner-count lifecycle governance for sites.

• Question 86:

  HOTSPOT

  Your organization has a Microsoft 365 subscription.

  The HR department at your company asks for a copy of all the recent files that were modified by a user named User1.

  You need to search for relevant content across Microsoft 365 and collect the files in a way that supports investigation and review.

  What should you use in the Microsoft Purview portal? To answer, select the appropriate solutions in the answer area.

  

  

  ---

  Microsoft Purview eDiscovery is used to search for and collect content, including files modified by a specific user when performing an investigation or legal request. Other solutions such as DLP or Compliance Manager serve prevention or posture management rather than producing the requested content copy.

• Question 87:

  Your organization has a Microsoft 365 subscription.

  All users have Microsoft 365 Copilot licenses.

  You need to identify where sensitive content is being used during Copilot interactions, analyze the content usage patterns, and provide recommendations on applying the appropriate protections.

  What should you use?

  A. Microsoft Viva Insights
  B. the Microsoft Purview DSPM for AI solution
  C. Microsoft Security Copilot
  D. the Microsoft Purview Insider Risk Management solution
  B. the Microsoft Purview DSPM for AI solution

  ---

  Explanation

  Microsoft Purview DSPM for AI provides visibility into AI activity, sensitive content use, and Copilot-related data security posture. Other Purview tools may classify or protect content, but DSPM for AI is designed to analyze AI usage patterns and risks. The requirement is Copilot sensitive content visibility.

• Question 88:

  HOTSPOT

  Your organization uses the Copilot Prompt Gallery to help users save, reuse, and share prompts. Users want to manage saved prompts and collaborate with colleagues by sharing useful prompts with Microsoft Teams teams or by using shared prompt links.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Yes; Yes; No

  The Copilot Prompt Gallery lets users manage saved prompts and share saved prompts with others, including through Teams where supported. A prompt generally must be saved before it can be shared as a reusable prompt asset. The requirement tests prompt management behavior, not compliance search.

• Question 89:

  Your organization has a Microsoft 365 subscription. You discover that some users cannot sign in to Microsoft 365. You need to view the failed Microsoft 365 sign-in attempts.

  What should you use?

  A. the Microsoft Defender portal
  B. the Microsoft Entra admin center
  C. the Microsoft Purview portal
  D. the Microsoft 365 admin center
  B. the Microsoft Entra admin center

  ---

  Explanation

  Microsoft Entra sign-in logs show failed sign-in attempts, authentication details, MFA results, Conditional Access decisions, and risk information. Other portals may show workload or compliance activity, but they do not provide the identity sign-in evidence required here. The rule is to troubleshoot Microsoft 365 sign-in failures from Entra sign-in logs.

• Question 90:

  HOTSPOT

  You want to view the administrative actions taken by a service administrator in Microsoft 365.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  No; No; Yes

  Administrative actions taken by service administrators are reviewed through Audit in the Microsoft Purview portal. Search and intelligence in the Microsoft 365 admin center manages search-related settings, and the Defender portal focuses on security operations. The requirement is audit review of admin activity.